Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: OZiCtRozqqcgPo32KQzX4Qw50ZTKovgESc8ebxvMP9Q=
Subject key identifier: 6A:63:60:FB:EC:51:3E:DB:1B:18:F8:AC:7B:1D:E3:50:1F:65:73:CC
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01A13F02629D909235AAD8592393BF89168B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0BC0
Signing time: Thu 15 Oct 2026 10:01:23 +0000
Manifest this update: Thu 15 Oct 2026 10:01:23 +0000
Manifest next update: Fri 16 Oct 2026 10:01:23 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: df6o48Zujhqam52qq/KjQmDbhVDaV92eQLQx9YiBhEs=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:62:9d:90:92:35:aa:d8:59:23:93:bf:89:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Oct 15 10:01:23 2026 GMT
Not After : Oct 16 10:01:23 2026 GMT
Subject: CN=6a6360fbec513edb1b18f8ac7b1de3501f6573cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:94:fa:84:23:6c:a5:f8:81:3c:88:5d:1e:
14:ca:ae:bc:03:62:d0:58:d4:f6:5d:12:39:79:50:
91:a5:d4:b7:dc:8b:2f:23:35:a3:21:e7:82:26:6f:
86:d7:ee:1e:47:fb:b3:85:94:f5:f9:06:a3:de:96:
ca:35:80:33:16:41:22:e4:10:35:b2:b2:56:96:d2:
a9:e3:a0:af:ea:29:5e:63:37:f3:81:03:05:0e:15:
10:2d:21:8f:de:ab:d6:27:6b:09:0f:2b:49:8c:be:
3a:bf:66:60:0b:f1:a6:1b:3a:d5:90:3c:5a:a5:cc:
72:7b:dc:1c:67:f4:1c:ad:bc:33:e9:89:3d:2d:ef:
9f:7d:b9:31:08:82:d2:20:b7:ff:76:f0:8b:d2:b2:
ee:8c:27:d2:f6:92:f2:e2:5b:7f:11:b6:cf:9d:b3:
5b:d3:79:b1:58:63:0c:7e:ce:77:da:19:36:26:32:
e9:38:fc:f7:d3:7b:0b:2b:b9:cd:2e:91:1c:5e:17:
cd:c3:78:00:63:81:68:27:28:15:ea:38:93:be:86:
d0:9c:62:d7:32:f1:ea:d9:1b:ab:1f:f3:3f:91:ce:
3d:e4:1b:1f:f5:66:4c:74:5f:1d:04:a3:dd:47:5a:
99:7d:38:0d:74:22:7c:2e:b5:5e:f4:fc:ea:81:4a:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:63:60:FB:EC:51:3E:DB:1B:18:F8:AC:7B:1D:E3:50:1F:65:73:CC
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:33:68:66:66:3f:fd:50:ad:e3:f7:b7:98:80:8a:4f:86:22:
fb:00:d7:35:12:51:9d:2e:98:1d:e9:74:87:85:93:fc:85:94:
52:01:31:27:c5:64:2e:6f:d2:61:8f:27:72:fb:d3:f2:53:81:
ce:57:2a:34:0d:09:47:db:45:88:c2:89:f3:0a:89:0e:19:e0:
ce:c5:d0:a5:60:e6:26:98:4d:f0:ac:24:21:72:e1:a1:3f:a6:
08:ed:d2:c4:c5:55:2c:6b:e1:37:20:4d:2a:ac:38:36:78:a2:
9d:54:84:d4:6a:a1:9d:d2:bb:08:6a:e1:27:8a:da:40:fe:1c:
ff:14:57:27:69:d5:24:c4:5e:28:e9:39:a0:3b:51:be:f9:9d:
fa:45:3b:34:9a:8f:29:48:6e:09:11:e5:8f:47:f8:7b:b6:47:
ea:9f:9d:eb:c4:05:cb:9a:c7:5e:bf:30:b3:ec:f7:a5:73:26:
bc:74:ae:8d:69:ab:86:59:0e:68:4b:df:d6:2a:91:2e:1a:c9:
04:64:aa:fd:61:43:6b:a5:73:4c:e0:07:cd:5a:42:a5:54:cf:
86:1c:3e:c4:55:6d:5b:be:48:90:32:db:48:3b:12:2f:c7:2b:
c1:df:78:40:6d:38:f6:c3:a2:44:50:da:aa:7e:ae:12:fb:00:
c7:57:60:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AmKdkJI1qthZI5O/iRaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjIzNTdhNDFmNGU1OTBiYTYyZTc3MWQyMDU0ZTAwOGUw
ZWQ5MWUwHhcNMjYxMDE1MTAwMTIzWhcNMjYxMDE2MTAwMTIzWjAzMTEwLwYDVQQD
Eyg2YTYzNjBmYmVjNTEzZWRiMWIxOGY4YWM3YjFkZTM1MDFmNjU3M2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjyU+oQjbKX4gTyIXR4Uyq68A2LQ
WNT2XRI5eVCRpdS33IsvIzWjIeeCJm+G1+4eR/uzhZT1+Qaj3pbKNYAzFkEi5BA1
srJWltKp46Cv6ileYzfzgQMFDhUQLSGP3qvWJ2sJDytJjL46v2ZgC/GmGzrVkDxa
pcxye9wcZ/Qcrbwz6Yk9Le+ffbkxCILSILf/dvCL0rLujCfS9pLy4lt/EbbPnbNb
03mxWGMMfs532hk2JjLpOPz303sLK7nNLpEcXhfNw3gAY4FoJygV6jiTvobQnGLX
MvHq2RurH/M/kc495Bsf9WZMdF8dBKPdR1qZfTgNdCJ8LrVe9PzqgUq5OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpjYPvsUT7bGxj4rHsd41AfZXPMMB8GA1UdIwQY
MBaAFADyNXpB9OWQumLncdIFTgCODtkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjIt
NWUwZmE5NGJjMzcwLzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjItNWUwZmE5NGJjMzcw
LzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjNoZmY/
/VCt4/e3mICKT4Yi+wDXNRJRnS6YHel0h4WT/IWUUgExJ8VkLm/SYY8ncvvT8lOB
zlcqNA0JR9tFiMKJ8wqJDhngzsXQpWDmJphN8KwkIXLhoT+mCO3SxMVVLGvhNyBN
Kqw4NniinVSE1GqhndK7CGrhJ4raQP4c/xRXJ2nVJMReKOk5oDtRvvmd+kU7NJqP
KUhuCRHlj0f4e7ZH6p+d68QFy5rHXr8ws+z3pXMmvHSujWmrhlkOaEvf1iqRLhrJ
BGSq/WFDa6VzTOAHzVpCpVTPhhw+xFVtW75IkDLbSDsSL8crwd94QG049sOiRFDa
qn6uEvsAx1dgag==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:38:05 2026 by rpki-client